479
Meta not complying with GDPR
(sh.itjust.works)
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
Well they have to, regardless of account status. If they don't, then as you say they're in violation and therefore you can report them to your local GDPR bureau, which every EU country has.
You don't have to sue Meta, the bureau has the authority to enforce compliance and give fines for every day they don't. Dunno how effective it is against entities like Meta, but they've been in hot water in a couple countries already.
Ed: ok I guess it's important how identifiable the data is. Monoliths like Meta do collect a ton of data which they technically can claim is anonymous... We'll see how that turns out eventually. But email and name are definitely personal data.
There's a really low bar for what is considered personal data. If they collect location data coupled to an "anonymous" ID, it's still personal data, because it shows you moving to your house and place of work every day. If you can infer a person's identity from the data, it's personal data.
So yeah them collecting your personal e-mail address and refusing to delete it is a clear violation of the GDPR.
And in this case, they demonstrated they held email address linked to first name, and linked to account status. Having all that PII and refusing to both hand it over and to purge it is an open/shut violation. And the only way the fines will scale is if enough people report these violations. Meta counts on most people just ignoring them.